We examine (directed) greybox fuzzing from a geometrical perspective, viewing dissimilarities on inputs and on control flow graphs (with dynamical statistics) as primitive objects of interest. We prototype and evaluate GoExploreFuzz, a greybox fuzzer for time-intensive programs that incorporates this perspective. The results indicate useful capabilities for greybox fuzzing that have hitherto been underutilized, notably quantifying the diversity of paths and autonomously tuning the "bandwidth" of mutations.
翻译:我们从几何学角度审视(定向)灰盒模糊测试,将输入及控制流图(包含动态统计特性)上的差异视为基本研究客体。我们设计并评估了GoExploreFuzz——一个针对时间密集型程序的灰盒模糊器,该工具整合了这一视角。实验结果表明,灰盒模糊测试此前未被充分利用的能力具有实用价值,尤其是路径多样性的量化以及变异"带宽"的自主调节功能。